154/69 Wednesday, March 18, 2026
The Federal Bureau of Investigation (Seattle Field Office) is actively investigating and identifying victims of a malware campaign involving games distributed on the Steam platform between May 2024 and January 2026. Cybercriminals embedded malicious software into certain games to steal personal data from web browsers and siphon funds from users’ cryptocurrency wallets. Games identified as involved in the campaign include BlockBlasters, Chemia, Dashverse (DashFPS), Lampy, Lunara, PirateFi, and Tokenova. Some of these games initially appeared harmless but were later updated to include malicious code, allowing attackers to bypass early detection.
The attackers used social engineering tactics by promoting these games through Discord and Telegram, recommending them in chat groups to build trust before encouraging downloads. In one reported case, a streamer lost over $32,000 during a live broadcast, and it is estimated that players of BlockBlasters alone may have suffered combined losses of up to $150,000. Security experts note that free games are an effective lure, particularly for younger users who may lack cybersecurity awareness and often share devices on home networks, potentially exposing family members’ accounts as well.
These games have now been removed from the Steam store. However, the FBI is continuing to collect information from individuals who downloaded or installed them to support investigations and victim assistance efforts. If you or someone you know may be affected, you can submit details such as your Steam account name or gameplay dates to Steam_Malware@fbi[.]gov or through the FBI’s official reporting channels. This incident serves as a reminder that even on trusted platforms like Steam, users should verify the credibility of developers and exercise caution when installing unknown software, even if it is advertised as free.
Source https://hackread.com/fbi-investigate-steam-games-malware-crypto-theft/